Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 04:59:21.060 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35248 10 6452 1 2025-11-26 04:59:37.425 00:00:10.364 TCP 23.104.0.1:46264 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:00:21.271 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52448 10 6452 1 2025-11-26 05:00:37.824 00:00:10.369 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:57:03.858 00:05:04.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:57:03.856 00:05:04.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:01:21.445 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60746 10 6452 1 2025-11-26 05:01:38.232 00:00:10.368 TCP 23.104.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:02:21.663 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-11-26 05:02:38.640 00:00:10.367 TCP 23.104.0.1:57374 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:03:02.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:03:02.671 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:03:21.877 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 10 6452 1 2025-11-26 05:03:39.052 00:00:10.369 TCP 23.104.0.1:33308 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:04:22.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53072 10 6452 1 2025-11-26 05:04:39.451 00:00:10.636 TCP 23.104.0.1:60806 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:05:22.292 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-11-26 05:05:40.126 00:00:10.366 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:06:22.470 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36638 10 6452 1 2025-11-26 05:06:40.532 00:00:10.366 TCP 23.104.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:03:03.860 00:05:04.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:03:03.857 00:05:04.410 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:07:22.687 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42158 10 6452 1 2025-11-26 05:07:40.937 00:00:10.377 TCP 23.104.0.1:58880 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:08:03.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:08:02.977 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:08:22.902 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48154 10 6452 1 2025-11-26 05:08:41.352 00:00:10.363 TCP 23.104.0.1:35596 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:09:23.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49400 10 6452 1 2025-11-26 05:09:41.753 00:00:10.377 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:10:23.333 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36668 10 6452 1 2025-11-26 05:10:42.173 00:00:10.382 TCP 23.104.0.1:54286 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:11:23.555 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51836 10 6452 1 2025-11-26 05:11:42.598 00:00:10.386 TCP 23.104.0.1:48434 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:12:23.733 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2025-11-26 05:12:43.010 00:00:10.398 TCP 23.104.0.1:44778 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:13:03.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:13:03.094 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:09:03.863 00:05:04.402 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:09:03.860 00:05:04.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:13:23.939 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46390 10 6452 1 2025-11-26 05:13:43.428 00:00:10.365 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:14:24.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41658 10 6452 1 2025-11-26 05:14:43.833 00:00:10.343 TCP 23.104.0.1:51854 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:15:24.390 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-11-26 05:15:44.218 00:00:10.368 TCP 23.104.0.1:47936 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:16:24.601 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-11-26 05:16:44.624 00:00:10.364 TCP 23.104.0.1:59804 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:17:24.819 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45832 10 6452 1 2025-11-26 05:17:45.025 00:00:10.322 TCP 23.104.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:18:03.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:18:03.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:18:25.039 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56194 10 6452 1 2025-11-26 05:18:45.392 00:00:10.366 TCP 23.104.0.1:33048 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:15:03.861 00:05:04.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:15:03.864 00:05:04.402 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:19:25.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54236 10 6452 1 2025-11-26 05:19:45.800 00:00:10.347 TCP 23.104.0.1:51158 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:20:25.461 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35208 10 6452 1 2025-11-26 05:20:46.180 00:00:10.323 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:21:25.679 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33202 10 6452 1 2025-11-26 05:21:46.545 00:00:10.317 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:22:25.890 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-11-26 05:22:46.904 00:00:10.373 TCP 23.104.0.1:56996 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:23:03.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:23:03.335 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:23:26.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45458 10 6452 1 2025-11-26 05:23:47.317 00:00:10.366 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:24:26.323 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-11-26 05:24:47.721 00:00:10.368 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:21:03.862 00:05:04.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:21:03.864 00:05:04.406 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:25:26.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-11-26 05:25:48.133 00:00:10.360 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:26:26.754 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41372 10 6452 1 2025-11-26 05:26:48.532 00:00:10.579 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:27:26.965 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45582 10 6452 1 2025-11-26 05:27:49.149 00:00:10.371 TCP 23.104.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:28:03.207 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:28:03.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:28:27.206 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43326 10 6452 1 2025-11-26 05:28:49.561 00:00:10.324 TCP 23.104.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:29:27.426 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-11-26 05:29:49.923 00:00:10.380 TCP 23.104.0.1:58888 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:30:27.605 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57828 10 6452 1 2025-11-26 05:30:50.340 00:00:10.320 TCP 23.104.0.1:39718 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:27:03.863 00:05:04.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:27:03.865 00:05:04.407 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:31:27.818 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50160 10 6452 1 2025-11-26 05:31:50.697 00:00:10.329 TCP 23.104.0.1:53688 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:32:28.044 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-11-26 05:32:51.093 00:00:10.365 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:33:03.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:33:03.615 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:33:28.257 00:00:10.274 TCP 1.101.0.1:3000 -> 22.102.0.1:42570 10 6452 1 2025-11-26 05:33:51.494 00:00:10.363 TCP 23.104.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:34:28.566 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37692 10 6452 1 2025-11-26 05:34:51.895 00:00:10.363 TCP 23.104.0.1:53166 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:35:28.742 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-11-26 05:35:52.300 00:00:10.360 TCP 23.104.0.1:53410 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:36:28.957 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42560 10 6452 1 2025-11-26 05:36:52.704 00:00:10.363 TCP 23.104.0.1:42808 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:33:03.864 00:05:04.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:33:03.866 00:05:04.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:37:29.185 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35562 10 6452 1 2025-11-26 05:38:03.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:38:03.336 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:37:53.108 00:00:10.365 TCP 23.104.0.1:36766 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:38:29.393 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38266 10 6452 1 2025-11-26 05:38:53.514 00:00:10.324 TCP 23.104.0.1:55734 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:39:29.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-11-26 05:39:53.876 00:00:10.365 TCP 23.104.0.1:51048 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:40:29.820 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:43342 10 6452 1 2025-11-26 05:40:54.278 00:00:10.364 TCP 23.104.0.1:55188 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:41:29.993 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-11-26 05:41:54.681 00:00:10.347 TCP 23.104.0.1:55134 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:42:30.216 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58236 10 6452 1 2025-11-26 05:43:03.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:42:55.093 00:00:10.702 TCP 23.104.0.1:53710 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:43:03.571 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:39:03.867 00:05:04.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:39:03.869 00:05:04.409 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:43:30.436 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45500 10 6452 1 2025-11-26 05:43:55.840 00:00:10.389 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:44:30.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-11-26 05:44:56.269 00:00:10.366 TCP 23.104.0.1:44604 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:45:30.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54804 10 6452 1 2025-11-26 05:45:56.676 00:00:10.367 TCP 23.104.0.1:51694 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:46:31.041 00:00:10.385 TCP 1.101.0.1:3000 -> 22.102.0.1:60730 10 6452 1 2025-11-26 05:46:57.108 00:00:10.359 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:47:31.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53228 10 6452 1 2025-11-26 05:48:04.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:48:04.158 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:47:57.505 00:00:10.328 TCP 23.104.0.1:41078 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:48:31.676 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38584 10 6452 1 2025-11-26 05:48:57.874 00:00:10.399 TCP 23.104.0.1:33112 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:45:03.871 00:05:04.409 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:45:03.869 00:05:04.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:49:31.893 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49384 10 6452 1 2025-11-26 05:49:58.310 00:00:10.367 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:50:32.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50240 10 6452 1 2025-11-26 05:50:58.712 00:00:10.388 TCP 23.104.0.1:49798 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:51:32.294 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33020 10 6452 1 2025-11-26 05:51:59.140 00:00:10.322 TCP 23.104.0.1:40606 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:52:32.465 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59998 10 6452 1 2025-11-26 05:53:04.096 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:53:04.122 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:52:59.499 00:00:10.335 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:53:32.675 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48060 10 6452 1 2025-11-26 05:53:59.878 00:00:10.361 TCP 23.104.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:54:32.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44742 10 6452 1 2025-11-26 05:55:00.281 00:00:10.361 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:51:03.873 00:05:04.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 05:51:03.870 00:05:04.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 05:55:33.110 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-11-26 05:56:00.680 00:00:10.321 TCP 23.104.0.1:41188 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:56:33.283 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35304 10 6452 1 2025-11-26 05:57:01.046 00:00:10.364 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:57:33.452 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38630 10 6452 1 2025-11-26 05:58:03.890 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 05:58:04.021 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 05:58:01.446 00:00:10.367 TCP 23.104.0.1:46316 -> 1.101.0.1:3000 11 1507 1 2025-11-26 05:58:33.665 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1074, avg pps: 0, avg bpp: 318 Time window: 2025-11-26 04:57:03 - 2025-11-26 05:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0018s User: 0.0037s Wall: 0.0021s flows/second: 77654.7 Runtime: 0.0021s